Cisco Wrt54g 2 V15 Manual

							Chapter 3Advanced Configuration
7
Wireless-G Broadband Router
MTU 
MTU is the Maximum Transmission Unit. It specifies 
the largest packet size permitted for Internet transmission. 
Select  Manual  if  you  want  to  manually  enter  the  largest 
packet  size  that  is  transmitted. To  have  the  Router  select 
the  best  MTU  for  your  Internet  connection,  keep  the 
default, Auto.
Size  When Manual is selected in the  MTU field, this option 
is enabled. Leave this value in the 1200 to 1500 range. The 
default size depends on the Internet Connection Type:
DHCP, Static IP, or Telstra: 
 
•1500
PPPoE: 
 
•1492
PPTP or L2TP: 
 
•1460
Network Setup
The  Network  Setup  section  changes  the  settings  on  the 
network connected to the Router’s Ethernet ports. Wireless 
Setup is performed through the Wireless tab.
Router IP
This  presents  both  the  Router’s  IP  Address  and  Subnet 
Mask as seen by your network.
Router IP Address
Network Address Server Settings (DHCP)
The settings allow you to configure the Router’s Dynamic 
Host  Configuration  Protocol  (DHCP)  server  function.  The 
Router can be used as a DHCP server for your network. A 
DHCP  server  automatically  assigns  an  IP  address  to  each 
computer  on  your  network.  If  you  choose  to  enable  the 
Router’s DHCP server option, make sure there is no other 
DHCP server on your network. 
Network Address Server Settings (DHCP)
DHCP  Server  DHCP  is  enabled  by  factory  default.  If  you 
already  have  a  DHCP  server  on  your  network,  or  you  do 
not  want  a  DHCP  server,  then  select  Disable  (no  other 
DHCP features will be available).
Starting  IP  Address  Enter  a  value  for  the  DHCP  server 
to  start  with  when  is
suing  IP  addresses.  Because  the 
Router’s  default  IP  address  is  192.168.1.1,  the  Starting  IP 
Address  must  be  192.168.1.2  or  greater,  but  smaller  than 
192.168.1.253. The default is 192.168.1.100
.
Maximum Number of DHCP Users  Enter the maximum 
number  of  PCs  that  you  want  the  DHCP  server  to  assign 
IP addresses to. This number cannot be greater than 253. 
The default is 50.
Client  Lease  Time  The  Client  Lease  Time  is  the  amount 
of time a network user will be allowed connection to the 
Router  with  their  current  dynamic  IP  address.  Enter  the 
amount  of  time,  in  minutes,  that  the  user  will  be “leased” 
this dynamic IP address. After the time is up, the user will 
be  automatically  assigned  a  new  dynamic  IP  address,  or 
the lease will be renewed. The default is  0 minutes, which 
means one day.
Static DNS (1-3) 
The Domain Name System (DNS) is how 
the  Internet  translates  domain  or  website  names  into 
Internet addresses or URLs. Your ISP will provide you with at 
least one DNS Server IP Address. If you wish to use another, 
enter that IP Address in one of these fields. You can enter up 
to three DNS Server IP Addresses here. The Router will use 
these for quicker access to functioning DNS servers
.
WINS  The  Windows  Internet  Naming  Service  (WINS) 
manages  each  PC’s  interaction  with  the  Internet.  If  you 
use  a  WINS  server,  enter  that  server’s  IP  Address  here. 
Otherwise, leave this blank.
Time Setting
Select  the  time  zone  in  which  your  network  functions 
from  this  drop-down  menu.  (You  can  even  automatically 
adjust for daylight saving time.)
Time Setting
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Setup > DDNS
The Router offers a Dynamic Domain Name System (DDNS) 
feature.  DDNS  lets  you  assign  a  fixed  host  and  domain 
name  to  a  dynamic  Internet  IP  address.  It  is  useful  when 
you  are  hosting  your  own  website,  FTP  server,  or  other 
server behind the Router. 
Before  you  can  use  this  feature,  you  need  to  sign 
up  for  DDNS  service  with  a  DDNS  service  provider,   
www.dyndns.org  or  www.TZO.com.  If  you  do  not  want 
to use this feature, keep the default setting, Disable.     
						

							Chapter 3Advanced Configuration
8
Wireless-G Broadband Router
DDNS
The Router offers a Dynamic Domain Name System (DDNS) 
feature.  DDNS  lets  you  assign  a  fixed  host  and  domain 
name  to  a  dynamic  Internet  IP  address.  It  is  useful  when 
you  are  hosting  your  own  website,  FTP  server,  or  other 
server behind the Router.
Before  you  can  use  this  feature,  you  need  to  sign  up  for 
DDNS  service  at  one  of  two  DDNS  service  providers, 
DynDNS.org  or  TZO.com.  If  you  do  not  want  to  use  this 
feature, keep the default, Disable.
DDNS Service
If  your  DDNS  service  is  provided  by  DynDNS.org,  then 
select 
DynDNS.org  from  the  drop-down  menu.  If  your 
DDNS  service  is  provided  by  TZO,  then  select  TZO.com. 
The  features  available  on  the  DDNS  screen  will  vary, 
depending on which DDNS service provider you use. 
DynDNS.org
Setup > DDNS > DynDNS
User Name  Enter the User Name for your DDNS account.
Password  Enter the Password for your DDNS account.
Host  Name  The  is  the  DDNS  URL  assigned  by  the  DDNS 
service.
Internet  IP  Address  The  Router’s  Internet  IP  address  is 
displayed. Because it is dynamic, it will change.
Status  The  status  of  the  DDNS  service  connection  is 
displayed.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
TZO.com
  
Setup > DDNS > TZO
E-mail Address, TZO Key, and Domain Name  Enter the 
settings of the account you set up with TZO.
Internet  IP  Address  The  Router’s  Internet  IP  address  is 
displayed. Because it is dynamic, it will change.
Status  The  status  of  the  DDNS  service  connection  is 
displayed.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Setup > MAC Address Clone
Some  ISPs  will  require  you  to  register  a  MAC  address 
in  order  to  access  the  Internet.  A  MAC  address  is  a 
12-digit code assigned to a unique piece of hardware for 
identification.  If  you  do  not  wish  to  re-register  the  MAC 
address with your ISP, you can use the MAC Address Clone 
feature to assign the currently registered MAC address to 
the Router.
 
Setup > MAC Address Clone
MAC Address Clone
Enable/Disable  To have the MAC Address cloned, select 
Enable.     
						

							Chapter 3Advanced Configuration
9
Wireless-G Broadband Router
User  Defined  Entry 
Enter  the  MAC  Address  registered 
with your ISP here.
Clone Your  PC’s  MAC  Clicking  this  button  will  clone  the 
MAC address of the computer you are using.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Setup > Advanced Routing
This screen is used to set up the Router’s advanced routing 
functions. NAT routes the host Router ‘s network connection 
to  the  Internet.  Dynamic  Routing  automatically  adjusts 
how  packets  travel  on  your  network.  Static  Routing  sets 
up a fixed route to another network destination.
Setup > Advanced Routing (Gateway)
Setup > Advanced Routing (Router )
Advanced Routing 
Operating  Mode  Select  the  mode  in  which  this  Router 
will  function.  If  this  Router  is  hosting  your  network’s 
connection  to  the  Internet,  select  Gateway.  If  another 
Router  exists  on  your  network,  select  Router.  When Router  is  chosen, 
Dynamic  Routing  will  be  available  as 
an option.
Dynamic Routing
RIP  This  feature  enables  the  Router  to  automatically 
adjust  to  physical  changes  in  the  network’s  layout  and 
exchange  routing  tables  with  the  other  router(s).  The 
Router  determines  the  network  packets’  route  based  on 
the  fewest  number  of  hops  between  the  source  and  the 
destination. This feature is  Disabled by default. From the 
drop-down  menu,  you  can  also  select  LAN  &  Wireless, 
which  performs  dynamic  routing  over  your  Ethernet  and 
wireless  networks.  You  can  also  select  WAN  (Internet), 
which  performs  dynamic  routing  with  data  coming  from 
the  Internet.  Finally,  selecting  Both  enables  dynamic 
routing  for  both  networks,  as  well  as  data  from  the 
Internet.
Select  set  number  To  set  up  a  static  route  between  the 
Router  and  another  network,  select  a  number  from  the 
Static  Routing  drop-down  list.  (A  static  route  is  a  pre-
determined pathway that network information must travel 
to reach a specific host or network.) Enter the information 
described  below  to  set  up  a  new  static  route.  (Click  the 
Delete This Entry button to delete a static route.)
Enter  Route  Name  Enter  a  name  for  the  Route  here, 
using a maximum of 25 alphanumeric characters.
Destination LAN IP  The Destination LAN IP is the address 
of the remote network or host to which you want to assign 
a static route.
Subnet  Mask  The  Subnet  Mask  determines  which 
portion  of  a  Destination  LAN  IP  address  is  the  network 
portion, and which portion is the host portion. 
Default  Gateway  This  is  the  IP  address  of  the  gateway 
device that allows for contact between the Router and the 
remote network or host.
Interface  This interface tells you whether the Destination 
IP Address is on the  LAN & Wireless (Ethernet and wireless 
networks) or the WAN (Internet).
Delete  This  Entry  To  delete  a  route,  select  its  number 
from the drop-down menu, and click this button.
Show Routing Table  Click Show Routing Table to open 
a screen displaying how data is routed through your local 
network.  For  each  route,  the  Destination  LAN  IP  address, 
Subnet  Mask,  Gateway,  and  Interface  are  displayed.  Click 
Refresh to update the information. Click  Close to exit this 
screen.
Routing Table     
						

							Chapter 3Advanced Configuration
10
Wireless-G Broadband Router
Click 
Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Wireless > Basic Wireless Settings
The  basic  settings  for  wireless  networking  are  set  on  this 
screen.
There  are  two  ways  to  configure  the  Router’s  wireless 
network(s), manual and Wi-Fi Protected Setup.
Wi-Fi Protected Setup is a feature that makes it easy to set 
up your wireless network. If you have client devices, such 
as  wireless  adapters,  that  support Wi-Fi  Protected  Setup, 
then you can use Wi-Fi Protected Setup.
Wireless > Basic Wireless Settings (Manual Setup)
Wireless  Configuration  To  manually  configure  your 
wireless network, select  Manual. Proceed to the “Wireless 
Network  (Manual)”  section. To  use Wi-Fi  Protected  Setup, 
select  Wi-Fi Protected Setup. Proceed to  Wi-Fi Protected 
Setup, page 10.
Wireless Network (Manual)
Wireless  Network  Mode  From  this  drop-down  menu, 
you  can  select  the  wireless  standards  running  on  your 
network. If you have Wireless-N, Wireless-G, and Wireless-B 
devices in your network, keep the default setting,  Mixed. 
If you have only Wireless-G and Wireless-B devices in your 
network,  select  BG-Mixed.  If  you  have  only  Wireless-N 
devices,  select  Wireless-N  Only.  If  you  have  only 
Wireless-G  devices,  select  Wireless-G  Only.  If  you  have 
only  Wireless-B  devices,  select  Wireless-B  Only.  If  your 
network has no wireless devices, or if you want to disable 
wireless networking, select Disabled.
Wireless Network Name (SSID)  The SSID is the network 
name  shared  among  all  points  in  a  wireless  network. 
The  SSID  must  be  identical  for  all  devices  in  the  wireless 
network.  It  is  case-sensitive  and  must  not  exceed 
32   keyboard  characters.  For  added  security,  you  should 
change the default SSID (linksys) to a unique name.
Wireless  Channel  Select  the  channel  from  the  list 
provided  to  correspond  with  your  network  settings.  All 
devices  in  your  wireless  network  must  be  broadcast  on 
the same channel in order to function correctly. Wireless  SSID  Broadcast 
When  wireless  clients  survey 
the local area for wireless networks to associate with, they 
will detect the SSID broadcast by the Router. To broadcast 
the  Router’s  SSID,  keep  the  default,  Enabled.  If  you  do 
not  want  to  broadcast  the  Router’s  SSID,  then  select 
Disabled.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Wi-Fi Protected Setup
There  are  three  methods  available.  Use  the  method  that 
applies to the client device you are configuring.
Wireless > Basic Wireless Settings (Wi-Fi Protected Setup)
Wi-Fi Protected Setup > Congratulations
NOTE:  Wi-Fi  Protected  Setup  configures  one 
client  device  at  a  time.  Repeat  the  instructions 
for  each  client  device  that  supports  Wi-Fi 
Protected Setup.     
						

							Chapter 3Advanced Configuration
11
Wireless-G Broadband Router
Method #1
Use this method if your client device has a Wi-Fi Protected 
Setup button.
Click  or  press  the
1.    Wi-Fi  Protected  Setup  button  on 
the client device.
Click  the 
2.  Wi-Fi  Protected  Setup  button  on  this 
screen.
After  the  client  device  has  been  configured,  click 
3. 
OK.  Then  refer  back  to  your  client  device  or  its 
documentation for further instructions.
Method #2
Use this method if your client device has a Wi-Fi Protected 
Setup PIN number.
Enter the PIN number in the
1.   field on this screen.
Click 
2.  Register.
After  the  client  device  has  been  configured,  click 
3. 
OK.  Then  refer  back  to  your  client  device  or  its 
documentation for further instructions.
Method #3
Use this method if your client device asks for the Router’s 
PIN number. 
Enter  the  PIN  number  listed  on  this  screen.  (It  is  also 
1. 
listed on the label on the bottom of the Router.)
After  the  client  device  has  been  configured,  click 
2. 
OK.  Then  refer  back  to  your  client  device  or  its 
documentation for further instructions.
The  Wi-Fi  Protected  Setup  Status,  Network  Name  (SSID), 
Security,  Encryption,  and  Passphrase  are  displayed  at  the 
bottom of the screen.
NOTE:  If  you  have  client  devices  that  do  not 
support Wi-Fi Protected Setup, note the wireless 
settings,  and  then  manually  configure  those 
client devices.
Wireless > Wireless Security
The  Wireless  Security  settings  configure  the  security  of 
your wireless network. There are six wireless security mode 
options  supported  by  the  Router:  WPA2  Personal,  WPA 
Personal,  WPA2  Enterprise,  WPA  Enterprise,  RADIUS,  and 
WEP.  WPA  (Wi-Fi  Protected  Access)  is  a  stronger  security 
standard  than  WEP  (Wireless  Equivalent  Privacy),  and 
WPA2  is  even  more  secure  than  WPA.  RADIUS  is  Remote 
Authentication  Dial-In  User  Service.  These  six  are  briefly 
discussed  here.  For  more  information  about  wireless 
security, refer to  Chapter 2:  Wireless Security Checklist, 
page 3.
Wireless Security
Wireless  security  is  strongly  recommended,  and  WPA2  is 
the strongest method available. Use WPA2 if it is supported 
by all of your wireless devices.
Security Mode
Select  the  security  method  for  your  wireless  network.  If 
you do not want to use wireless security, keep the default, 
Disabled.
WPA2 Personal
NOTE:  If  you  are  using  WPA2  or  WPA,  each 
device  in  your  wireless  network  MUST  use  the 
same WPA  method  and  shared  key,  or  else  the 
network will not function properly.
Security Mode > WPA2 Personal
WPA Algorithm  WPA2 supports two encryption methods, 
TKIP  and  AES,  with  dynamic  encryption  keys.  Select  the 
type of algorithm, AES, or TKIP + AES. The default is AES.
WPA  Shared  Key  Enter  a  WPA  Shared  Key  of  8-63 
characters. 
Group Key Renewal  Enter a Group Key Renewal period, 
which instructs the Router how often it should change the 
encryption keys. The default is 3600 seconds.   
						

							Chapter 3Advanced Configuration
12
Wireless-G Broadband Router
WPA Personal
NOTE:  If  you  are  using  WPA2  or  WPA,  each 
device  in  your  wireless  network  MUST  use  the 
same WPA  method  and  shared  key,  or  else  the 
network will not function properly.
 
Security Mode > WPA Personal
WPA Algorithm  WPA supports two encryption methods, 
TKIP  and  AES,  with  dynamic  encryption  keys.  Select 
the  type  of  algorithm,  TKIP  or AES.  (AES  is  a  stronger 
encryption method than TKIP.)
WPA Shared Key   Enter the key shared by the Router and 
your other network devices. It must have 8-63 characters.
Group  Key  Renewal  Enter  a  Key  Renewal  period,  which 
tells the Router how often it should change the encryption 
keys. The default is 3600 seconds.
WPA2 Enterprise
This  option  features  WPA2  used  in  coordination  with  a 
RADIUS server. (This should only be used when a RADIUS 
server is connected to the Router.
 
Security Mode > WPA2 Enterprise
WPA  Algorithm   WPA2  supports  two  encryption 
methods,  TKIP  and  AES,  with  dynamic  encryption  keys. 
Select  the  type  of  algorithm,  AES,  or TKIP + AES.  The 
default is AES RADIUS  Server  Address 
Enter  the  IP  Address  of  the 
RADIUS server.
RADIUS  Port    Enter  the  port  number  of  the  RADIUS 
server. The default is 1812.
Shared  Key  Enter  the  key  shared  between  the  Router 
and the server.
Key  Renewal  Timeout  Enter  a  Key  Renewal  Timeout 
period,  which  instructs  the  Router  how  often  it  should 
change the encryption keys. The default is 3600 seconds.
WPA Enterprise
This  option  features  WPA  used  in  coordination  with  a 
RADIUS server. (This should only be used when a RADIUS 
server is connected to the Router.) 
Security Mode > WPA Enterprise
WPA Algorithm  WPA supports two encryption methods, 
TKIP  and  AES,  with  dynamic  encryption  keys.  Select 
the  type  of  algorithm,  TKIP  or AES.  (AES  is  a  stronger 
encryption method than TKIP.)
RADIUS  Server  Address  Enter  the  IP  Address  of  the 
RADIUS server.
RADIUS  Port    Enter  the  port  number  of  the  RADIUS 
server. The default is 1812.
Shared  Key  Enter  the  key  shared  between  the  Router 
and the server.
Key  Renewal  Timeout  Enter  a  Key  Renewal  Timeout 
period,  which  instructs  the  Router  how  often  it  should 
change the encryption keys. The default is 3600 seconds.     
						

							Chapter 3Advanced Configuration
13
Wireless-G Broadband Router
RADIUS
This  option  features  WEP  used  in  coordination  with  a 
RADIUS server. (This should only be used when a RADIUS 
server is connected to the Router.) 
Security Mode > RADIUS
IMPORTANT:  If  you  are  using  WEP  encryption, 
each  device  in  your  wireless  network  MUST 
use  the  same  WEP  encryption  method  and 
encryption key, or else your wireless network will 
not function properly.
RADIUS  Server  Address 
Enter  the  IP  Address  of  the 
RADIUS server.
RADIUS  Port    Enter  the  port  number  of  the  RADIUS 
server. The default is 1812.
Shared  Key  Enter  the  key  shared  between  the  Router 
and the server.
Default  Transmit  Key  Select  a  Default  Transmit  Key 
(choose which Key to use). The default is 1.
WEP  Encryption  Select  a  level  of  WEP  encryption,   
64  bits  10  hex  digits  or  128  bits  26  hex  digits.  The 
default is 64 bits 10 hex digits.
Passphrase  Enter a Passphrase to automatically generate 
WEP keys. Then click Generate.
Key 1-4  If you did not enter a Passphrase, enter the WEP 
key(s) manually.
WEP
WEP is a basic encryption method, which is not as secure 
as WPA. 
IMPORTANT:  If  you  are  using  WEP  encryption, 
each  device  in  your  wireless  network  MUST 
use  the  same  WEP  encryption  method  and 
encryption key, or else your wireless network will 
not function properly.
Security Mode > WEP
Default  Transmit  Key  Select  a  Default  Transmit  Key 
(choose which Key to use). The default is 1.
WEP Encryption  Select a level of WEP encryption,  64 bits 
10  hex  digits  or  128  bits  26  hex  digits.  The  default  is 
64 bits 10 hex digits.
Passphrase  Enter a Passphrase to automatically generate 
WEP keys. Then click Generate.
Key 1-4  If you did not enter a Passphrase, enter the WEP 
key(s) manually.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Wireless > Wireless MAC Filter
Wireless access can be filtered (restricted) by specifying the 
MAC addresses of the devices in your wireless network.
   
Wireless > Wireless MAC Filter       
						

							Chapter 3Advanced Configuration
14
Wireless-G Broadband Router
Wireless MAC Filter
Wireless MAC Filter To filter wireless users by MAC Address, 
either  permitting  or  blocking  access,  click  Enable.  If  you  do 
not  wish  to  filter  users  by  MAC  Address,  keep  the  default, 
Disable
.
Prevent  Select  this  to  block  wireless  access  by  MAC 
Address. This button is selected by default.
Permit  Only  Select  this  to  allow  wireless  access  by  MAC 
Address. This button is not selected by default.
Edit  MAC  Filter  List 
Click  this  to  open  the  MAC  Address 
Filter  List  screen.  On  this  screen,  you  can  list  users,  by  MAC 
Address,  to  whom  you  wish  to  provide  or  block  access.  For 
easy reference, click  Wireless Client MAC List to display a list 
of network users by MAC Address
.
MAC Address Filter List
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Wireless > Advanced Wireless Settings
This  Wireless  >  Advanced  Wireless  Settings  screen  is  used 
to  set  up  the  Router’s  advanced  wireless  functions. 
These  settings  should  only  be  adjusted  by  an  expert 
administrator  because  incorrect  settings  can  reduce 
wireless performance.
 
Wireless > Advanced Wireless Settings
Advanced Wireless
Authentication  Type  The  default  is  set  to Auto,  which 
allows  either  Open  System  or  Shared  Key  authentication 
to be used. With  Open System authentication, the sender 
and the recipient do NOT use a WEP key for authentication. 
With  Shared Key authentication, the sender and recipient 
use a WEP key for authentication.
Basic Rate  The Basic Rate setting is not actually one rate 
of  transmission  but  a  series  of  rates  at  which  the  Router 
can  transmit.  The  Router  will  advertise  its  Basic  Rate  to 
the other wireless devices in your network, so they know 
which rates will be used. The Router will also advertise that 
it  will  automatically  select  the  best  rate  for  transmission. 
The  default  setting  is  Default,  for  transmission  at  all 
standard wireless rates (1-2 Mbps, 5.5 Mbps, 11 Mbps, 18 
Mbps, and 24 Mbps). Other options are  1-2Mbps, for use 
with  older  wireless  technology,  and  All,  for  transmission 
at  all  wireless  rates.  The  Basic  Rate  is  not  the  actual  rate 
of  data  transmission.  If  you  want  to  specify  the  Router’s 
rate of data transmission, configure the Transmission Rate 
setting.
Transmission Rate  The rate of data transmission should 
be set depending on the speed of your wireless network. 
You can select from a range of transmission speeds, or you 
can select  Auto to have the Router automatically use the 
fastest  possible  data  rate  and  enable  the  Auto-Fallback 
feature.  Auto-Fallback  will  negotiate  the  best  possible 
connection  speed  between  the  Router  and  a  wireless 
client. The default is Auto.
CTS  Protection  Mode  CTS  (Clear-To-Send)  Protection 
Mode should remain disabled unless you are having severe 
problems  with  your  Wireless-G  products  not  being  able 
to  transmit  to  the  Router  in  an  environment  with  heavy 
802.11b  traffic.  This  function  boosts  the  Router’s  ability 
to  catch  all  Wireless-G  transmissions  but  will  severely 
decrease performance.
Frame  Burst  Enabling  this  option  should  provide  your 
network  with  greater  performance,  depending  on  the     
						

							Chapter 3Advanced Configuration
15
Wireless-G Broadband Router
manufacturer  of  your  wireless  products.  To  turn  on  the 
Frame Burst option, select Enable. The default is Disable.
Beacon  Interval 
A  beacon  is  a  packet  broadcast  by  the 
Router  to  synchronize  the  wireless  network.  The  default 
is  100.  Enter  a  value  between  1  and  65,535  milliseconds. 
The Beacon Interval value indicates the frequency interval 
of the beacon. 
DTIM  Interval  This  value,  between  1  and  255,  indicates 
the  interval  of  the  Delivery  Traffic  Indication  Message 
(DTIM).  A  DTIM  field  is  a  countdown  field  informing 
clients  of  the  next  window  for  listening  to  broadcast 
and  multicast  messages.  When  the  Router  has  buffered 
broadcast  or  multicast  messages  for  associated  clients,  it 
sends the next DTIM with a DTIM Interval value. Its clients 
hear  the  beacons  and  awaken  to  receive  the  broadcast 
and multicast messages. The default is 1.
Fragmentation  Threshold  This  value  specifies  the 
maximum  size  for  a  packet  before  data  is  fragmented 
into  multiple  packets.  If  you  experience  a  high  packet 
error  rate,  you  may  slightly  increase  the  Fragmentation 
Threshold.  Setting  the  Fragmentation  Threshold  too  low 
may  result  in  poor  network  performance.  Only  minor 
reduction  of  the  default  value  is  recommended.  In  most 
cases, it should remain at its default value of 2346.
RTS Threshold  Should  you  encounter  inconsistent  data 
flow,  only  minor  reduction  of  the  default  value,  2347,  is 
recommended.  If  a  network  packet  is  smaller  than  the 
preset  RTS  threshold  size,  the  RTS/CTS  mechanism  will 
not  be  enabled. The  Router  sends  Request  to  Send  (RTS) 
frames  to  a  particular  receiving  station  and  negotiates 
the  sending  of  a  data  frame.  After  receiving  an  RTS,  the 
wireless station responds with a Clear to Send (CTS) frame 
to  acknowledge  the  right  to  begin  transmission. The  RTS 
Threshold  value  should  remain  at  its  default  value  of 
2347.
AP Isolation  This isolates all wireless clients and wireless 
devices on your network from each other. Wireless devices 
will be able to communicate with the Router but not with 
each other. To use this function, select  On. AP Isolation is 
turned Off by default. 
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Security > Firewall
The  Security > Firewall screen is used to configure a firewall 
that can filter out various types of unwanted traffic on the 
Router’s local network.
Security > Firewall
Firewall
Firewall  Protection  To  use  firewall  protection,  keep  the 
default  selection,  Enable.  To  turn  off  firewall  protection, 
select Disable.
Block WAN Requests
Block  Anonymous  Internet  Requests  This  feature 
makes  it  more  difficult  for  outside  users  to  work  their 
way into your network. This feature is selected  by default.  
Deselect  the  feature  to  allow  anonymous  Internet 
requests
.
Filter  Multicast  Multicasting  allows  for  multiple 
transmissions  to  specific  recipients  at  the  same  time.  If 
multicasting  is  permitted,  then  the  Router  will  allow  IP 
multicast  packets  to  be  forwarded  to  the  appropriate 
computers.  This  feature  is  selected  by  default.  Deselect 
this feature to disable it.
Filter  Internet  NAT  Redirection  This  feature  uses 
port  forwarding  to  block  access  to  local  servers  from 
local  networked  computers.  Select  Filter  Internet  NAT 
Redirection to filter Internet NAT redirection. This feature 
is not selected by default.
Filter IDENT (Port 113)  This feature keeps port 113 from 
being  scanned  by  devices  outside  of  your  local  network. 
This feature is selected by default. Deselect this feature to 
disable it.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Security > VPN Passthrough
The  Security > VPN Passthrough screen allows you to enable 
VPN  tunnels  using  IPSec,  PPTP,  or  L2TP  protocols  to  pass 
through the Router’s firewall.   
						

							Chapter 3Advanced Configuration
16
Wireless-G Broadband Router
 
Security > VPN Passthrough
VPN Passthrough
IPSec  Passthrough 
Internet  Protocol  Security  (IPSec)  is 
a  suite  of  protocols  used  to  implement  secure  exchange 
of  packets  at  the  IP  layer.  To  allow  IPSec  tunnels  to  pass 
through the Router, keep the default, Enable. 
PPTP  Passthrough  Point-to-Point  Tunneling  Protocol 
(PPTP)  allows  the  Point-to-Point  Protocol  (PPP)  to  be 
tunneled through an IP network. To allow PPTP tunnels to 
pass through the Router, keep the default, Enable. 
L2TP  Passthrough  Layer  2  Tunneling  Protocol  is  the 
method  used  to  enable  Point-to-Point  sessions  via  the 
Internet on the Layer 2 level. To allow L2TP tunnels to pass 
through the Router, keep the default, Enable.
Click  Save Settings to apply your changes, or click  Cancel 
Changes to clear your changes.
Access Restrictions > Internet Access
The  Access Restrictions > Internet Access screen allows you 
to  block  or  allow  specific  kinds  of  Internet  usage  and 
traffic,  such  as  Internet  access,  designated  services,  and 
websites during specific days and times.
Access Restrictions > Internet Access
Internet Access
Internet  Access  Policy  Access  can  be  managed  by  a 
policy.  Use  the  settings  on  this  screen  to  establish  an 
access  policy  (after  Save  Settings  is  clicked).  Selecting  a 
policy from the drop-down menu will display that policy’s 
settings.  To  delete  a  policy,  select  that  policy’s  number 
and  click  Delete. To  view  all  the  policies,  click  Summary. 
(To  delete  policies  from  the  Summary  screen,  select  the 
policy or policies, and click  Delete. To return to the Internet 
Access screen, click Close.)
Internet Policy Summary
Status  Policies are disabled by default. To enable a policy, 
select the policy number from the drop-down menu, and 
select Enable.
To create an Internet Access policy:
Select  a  number  from  the 
1.  Internet  Access  Policy  drop-
down menu.
To enable this policy, select 
2.  Enable.
Enter a Policy Name in the field provided. 
3. 
Click 
4.  Edit List of PCs to select which PCs will be affected 
by  the  policy.  The  List  of  PCs  screen  appears.  You  can